CVE-2022-48772

media: lgdt3306a: Add a check against null-pointer-def

MEDIUM

5.5

CVSS Score

Published: June 25, 2024 at 02:22 PM UTC

Updated: June 17, 2026 at 05:16 AM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM5.5

Exploit prediction

EPSS 0.2%

SSVC

No known exploit

Description

In the Linux kernel, the following vulnerability has been resolved: media: lgdt3306a: Add a check against null-pointer-def The driver should check whether the client provides the platform_data. The following log reveals it: [ 29.610324] BUG: KASAN: null-ptr-deref in kmemdup+0x30/0x40 [ 29.610730] Read of size 40 at addr 0000000000000000 by task bash/414 [ 29.612820] Call Trace: [ 29.613030] <TASK> [ 29.613201] dump_stack_lvl+0x56/0x6f [ 29.613496] ? kmemdup+0x30/0x40 [ 29.613754] print_report.cold+0x494/0x6b7 [ 29.614082] ? kmemdup+0x30/0x40 [ 29.614340] kasan_report+0x8a/0x190 [ 29.614628] ? kmemdup+0x30/0x40 [ 29.614888] kasan_check_range+0x14d/0x1d0 [ 29.615213] memcpy+0x20/0x60 [ 29.615454] kmemdup+0x30/0x40 [ 29.615700] lgdt3306a_probe+0x52/0x310 [ 29.616339] i2c_device_probe+0x951/0xa90

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

v < 5.4.2784.11 ≤ v < 5.10.2194.11 ≤ v < 5.15.1614.11 ≤ v < 5.4.2784.11 ≤ v < 6.1.944.11 ≤ v < 6.104.11 ≤ v < 6.6.344.11 ≤ v < 6.9.55.11 ≤ v < 5.15.1615.16 ≤ v < 6.1.945.5 ≤ v < 5.10.2196.2 ≤ v < 6.6.346.7 ≤ v < 6.9.54.114f75189024f4186a7ff9d56f4a8cb690774412ec

Vendor states this is fixed in 526238d32c3acc3d597fd8c9a34652bfe9086cea (fixed)

Vendor states this is fixed in 7d12e918f2994c883f41f22552a61b9310fa1e87 (fixed)

Vendor states this is fixed in 8915dcd29a82096acacf54364a8425363782aea0 (fixed)

Vendor states this is fixed in 8e1e00718d0d9dd83337300572561e30b9c0d115 (fixed)

Vendor states this is fixed in b479fd59a1f4a342b69fce34f222d93bf791dca4 (fixed)

Vendor states this is fixed in c1115ddbda9c930fba0fdd062e7a8873ebaf898d (fixed)

Vendor states this is fixed in d082757b8359201c3864323cea4b91ea30a1e676 (fixed)

Vendor states this is fixed in 4.11 (unaffected)

Vendor states this is fixed in 5.10.219 (unaffected)

Vendor states this is fixed in 5.15.161 (unaffected)

Vendor states this is fixed in 5.4.278 (unaffected)

Vendor states this is fixed in 6.1.94 (unaffected)